Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAXAcOJd5DFSGwQZSEbD5zL4Eo0.roa
File: GAXAcOJd5DFSGwQZSEbD5zL4Eo0.roa (raw, json)
Hash identifier: Q6Hp8kWAsWs5lf0cgP0NfYtfmC1oKLcfTbZPxoUC/oc=
Subject key identifier: 18:05:C0:70:E2:5D:E4:31:52:1B:04:19:48:46:C3:E7:32:F8:12:8D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F056A8E6AA1A8929970B381BB95F5B0A7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAXAcOJd5DFSGwQZSEbD5zL4Eo0.roa
Signing time: Fri 26 Jun 2026 19:31:37 +0000
ROA not before: Fri 26 Jun 2026 19:31:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197540
IP address blocks: 87.84.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:6a:8e:6a:a1:a8:92:99:70:b3:81:bb:95:f5:b0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 26 19:31:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1805c070e25de431521b04194846c3e732f8128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:8c:4e:01:d4:4d:61:98:87:8d:fc:93:5c:
fc:01:a7:f2:59:2c:1a:d4:12:b5:5f:90:6d:4f:9f:
e9:1f:26:c5:e4:10:cd:77:37:80:0a:47:22:de:bb:
d4:12:19:0b:e5:b4:4a:63:3d:c3:22:15:07:cd:31:
d7:0b:9f:29:a2:fa:13:e0:8e:07:28:46:4f:db:bc:
49:0a:0e:fa:0a:85:7f:72:58:b6:7d:ff:55:f7:71:
fa:2b:34:c6:4c:34:f2:89:6a:30:57:35:00:dc:3b:
00:30:cf:24:98:42:27:c2:f7:b1:83:43:c9:35:01:
0c:4f:9c:e3:1f:ab:23:65:d4:78:3c:9d:5d:58:d3:
89:4b:a9:79:2e:a4:54:82:52:6f:fe:f2:c0:44:a7:
73:b5:21:e0:6d:c7:7d:25:03:24:7a:81:b7:29:c7:
ff:ce:57:81:24:83:63:d7:ba:18:d4:9b:b8:a8:7d:
64:15:b3:26:88:10:a3:6d:9e:d4:8b:1c:73:64:94:
0e:92:a3:e1:ff:3f:d1:66:97:ce:af:ac:ff:8b:6e:
25:f9:5d:e7:24:dc:55:e6:08:32:d9:55:ea:36:fb:
1c:fa:24:50:f9:f2:ca:d2:de:59:0c:13:69:78:d4:
73:29:d1:fc:42:99:eb:56:65:8b:5a:2f:a1:17:19:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:05:C0:70:E2:5D:E4:31:52:1B:04:19:48:46:C3:E7:32:F8:12:8D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/GAXAcOJd5DFSGwQZSEbD5zL4Eo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:cc:ae:2c:fa:26:ed:6c:a3:f7:bb:c5:67:17:03:4f:68:eb:
fc:27:06:78:b3:c7:21:de:ff:2f:8d:2e:5b:bf:2b:ac:a8:16:
ce:3e:b2:87:9b:17:ba:6e:b2:25:5e:d0:47:42:c2:45:2b:85:
d8:cf:88:f7:78:40:9d:3e:e9:e1:9d:ab:0b:cc:75:99:34:08:
c7:93:79:2a:01:c3:da:85:a6:58:b6:96:9d:b1:38:bd:ab:05:
4e:8e:95:8c:23:fe:fb:ed:9a:d8:10:38:d5:30:90:cc:2e:39:
ce:65:84:9e:b6:8e:f8:75:4b:47:57:14:f9:59:a0:38:68:71:
75:11:9e:95:3d:74:e7:28:fc:2e:ba:3f:bf:7f:42:4f:47:ea:
9a:ae:fd:c9:65:56:93:cf:63:dc:23:8b:0c:4d:a5:18:7c:ef:
f5:cd:f1:bb:2f:a0:c5:3a:0d:47:f1:68:e0:79:f8:f2:c9:fe:
28:b2:d5:69:67:2c:6a:e3:ac:45:99:cf:cd:ee:00:45:74:35:
d8:e0:1e:76:35:69:31:33:02:33:69:39:f8:b2:f7:2d:23:60:
64:52:36:e6:5e:fb:1a:34:6d:6d:b1:3b:42:d1:33:34:eb:a2:
3b:a9:e0:dd:d5:f3:f0:9c:73:9f:3d:41:b3:1c:73:41:7e:d1:
39:61:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client